[Zope] Zope and SSL

[Jens Vagelpohl]

thierry,

please keep this exchange on the list so that other people might benefit 
from it.

i can't advise you on specific setups involving site roots or access rules.
  i personally use nothing but a virtual host monster in all my setups 
because that is the easiest. with a VHM setup it would not be hard to add 
rewrite rules to apache that deal exclusively with manage-pages.

maybe someone else using site roots/access rules can help.

jens


On Thursday, February 21, 2002, at 11:34 , Thierry Florac wrote:

>
>   Hi...
>
> Well, I've tried to do what you say, i.e. installing apache-ssl and
> creating a few rewrite rules, but I also have SiteRoot objects which
> transform links URLs to "http://...".
> So I think my problem can't be solved so easilly, as long as I'm not an
> expert with SSL or mod_rewrite...
>
> Should I have to use "Access rules" also ?? But I can't find any good
> documentation about them...
>
> Any help would be greatly appreciated...
>
> Thanks,
>
>   Thierry
>
>
> P.S. : if this can help : I can access the Zope site through SSL without
> many problems ; but as soon as I want to access ZMI, I receive a first
> message saying "You have requested an encrypted page containing
> unencrypted informations...", and then every frame of the ZMI only
> display a message saying "you don't have permission to access
> /manage_... on this server"...
> Any idea ??
>
>
>
> On Thu, 2002-02-21 at 13:59, Jens Vagelpohl wrote:
>> there is a ZServer SSL package available somewhere (i think you might 
>> find
>> it if you search zope.org), but for most people the easiest is probably
>> using apache and mod_ssl and then some creative rewrite rules in apache'
>> s
>> configuration that catch all requests to management screens and redirect
>> them to a https address.
>>
>> jens
>>
>>
>> On Thursday, February 21, 2002, at 06:18 , Thierry Florac wrote:
>>
>>>
>>>   Hi...
>>>
>>> I'd like to let users access my Zope web site normally through HTTP, but
>>> make my Zope management screens (in fact, any URL containing '/manage')
>>> only available through HTTPS.
>>>
>>> I'm actually using Zope with Apache and mod_rewrite rules using proxy
>>> [P].
>>>
>>> How could I do this...?
>>>
>>> Thanks for any help...
>>>
>>>   Thierry
>>>
>>> --
>>>   Linux every day, keeps Dr Watson away...
>>>   http://gpc.sourceforge.net
>>>
>>
>>
>
>